Every company that can receive data held in Mikkl, what each one gets, and why. If this list changes we will tell you before it does.
Encrypted before it leaves our server, with a key we do not keep on that server. The storage provider cannot read what it holds.
No request bodies, no cookies, no authentication headers. TRN, NIS and NHT numbers, dates of birth and pay rates are removed by name and by shape. What is left is which account hit which bug.
OFF unless an owner or admin turns it on for the workspace, having read what is sent. Nothing else is ever sent — not your ledger, not your payroll. CSV statement import does not use it at all.
Two destinations: Canada, which holds the database and is not optional, and the United States, which receives stripped error reports and — only with your agreement — the documents you upload for scanning.
No advertising networks, no analytics brokers, no data resellers. Nobody pays us for access to what is in here, and nobody is going to.